CVE-2025-60783

EUVD-2025-35101
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA-ADPADP
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
rajvi-patel-22restaurant-management-system-dbms-project
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e97f35380b2922ad4ebe8c47639
https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e97f35380b2922ad4ebe8c47639?pvs=73